cool1_BK.exe [md5:3c44e8]

显示全部楼层 · 发表于 2007-7-3 15:22:03

瑞星可以吗？

File:	cool1_BK.exe
Status:	POSSIBLY INFECTED/MALWARE
MD5:	3c44e8620071382aa002d06bec983e0f
Packers detected:	PE_PATCH
Bit9 reports:	File not found

Scanner results
Scan taken on 03 Jul 2007 07:16:00 (GMT)
A-Squared	Found nothing
AntiVir	Found BDS/Hupigon.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found DeepScan:Generic.Hupigon.8A2F911C
ClamAV	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found GrayBird
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2007-7-3 15:39:10

上报

显示全部楼层 · 发表于 2007-7-3 15:49:54

那天你们搞个鸽子过过IKARUS

C:\ABC\cool1_BK.rar:\cool1_BK.exe - Signature 'Trojan-PWS.Win32.Agent.iu' found
C:\ABC\cool1_BK.rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.047

显示全部楼层 · 发表于 2007-7-3 16:10:40

2007-7-3 JAY15:41:19 C:\WINDOWS\system32\services.exe HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows XP Vista ImagePath C:\WINDOWS\Hacker.com.cn.ini Unicode null-terminated string (with environment variable references) Create detected

显示全部楼层 · 发表于 2007-7-3 16:30:52

貌似在xp系统没反映在其他系统才有小动作

微点砍掉

[病毒样本] cool1_BK.exe [md5:3c44e8]

本帖子中包含更多资源